- Arshan Dabirsiaghi is the the Director of Research for Aspect Security.
- Jeremiah Grossman is the CTO of Whitehat.
- Jim Manico is a Web Application Architect and Security Instructor for Aspect Security.
- Jeff Williams is the CEO of Aspect Security and also volunteers as one of the chairs of the OWASP Foundation.

Recap OWASP EU Summit

- Jeremiah gave up on browser security
- Robert bailed on the summit
- Talked with Adobe rep
- Figured out the charter for ISWG
- Press coverage is hilarious

- Chris Wysopal (Zero in a bit)
- Attacks are getting simpler (and we're barely fixing old vulns)
- Assets are moving more and more to the web
- New technology = make all same mistakes again
- Aspect never wanted to be NGS - but everything is broken
- Just this morning, hilarious SSO product bypass (thats all we'll say, not method/verb tampering)

Canonicalization is a nightmare

- mod_security turns off Unicode validation by default
- another commercial WAF bypassable by default with invalid UTF-8
- any byte-based validation is failure on the web (or unmanaged langs)